[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.6' (ECDSA) to the list of known hosts. executing program executing program executing program executing program syzkaller login: [ 159.326079][ T8783] ===================================================== [ 159.333109][ T8783] BUG: KMSAN: uninit-value in packet_rcv_fanout+0x2442/0x25c0 [ 159.340604][ T8783] CPU: 0 PID: 8783 Comm: sshd Not tainted 5.7.0-rc4-syzkaller #0 [ 159.348337][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.358416][ T8783] Call Trace: [ 159.361762][ T8783] dump_stack+0x1c9/0x220 [ 159.366143][ T8783] kmsan_report+0xf7/0x1e0 [ 159.370601][ T8783] __msan_warning+0x58/0xa0 [ 159.375155][ T8783] packet_rcv_fanout+0x2442/0x25c0 [ 159.380428][ T8783] ? __skb_clone+0x939/0x970 [ 159.385062][ T8783] ? kmsan_get_metadata+0x11d/0x180 [ 159.390308][ T8783] ? kmsan_get_metadata+0x11d/0x180 [ 159.395557][ T8783] ? packet_direct_xmit+0x470/0x470 [ 159.400794][ T8783] dev_queue_xmit_nit+0x862/0x1270 [ 159.405986][ T8783] dev_hard_start_xmit+0x20f/0xab0 [ 159.411158][ T8783] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 159.417267][ T8783] ? kmsan_get_metadata+0x11d/0x180 [ 159.422505][ T8783] sch_direct_xmit+0x512/0x18b0 [ 159.427422][ T8783] __qdisc_run+0x15ec/0x3350 [ 159.432056][ T8783] ? kmsan_get_metadata+0x11d/0x180 [ 159.437295][ T8783] ? kmsan_set_origin_checked+0x95/0xf0 [ 159.442905][ T8783] __dev_queue_xmit+0x23b7/0x3b20 [ 159.448013][ T8783] dev_queue_xmit+0x4b/0x60 [ 159.452559][ T8783] ip_finish_output2+0x20fd/0x2610 [ 159.457713][ T8783] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 159.463823][ T8783] ? nf_ct_deliver_cached_events+0x511/0x6c0 [ 159.469871][ T8783] __ip_finish_output+0xaa7/0xd80 [ 159.474958][ T8783] ip_finish_output+0x166/0x410 [ 159.479879][ T8783] ip_output+0x593/0x680 [ 159.484184][ T8783] ? ip_mc_finish_output+0x6c0/0x6c0 [ 159.489507][ T8783] ? ip_finish_output+0x410/0x410 [ 159.494571][ T8783] __ip_queue_xmit+0x1b5c/0x21a0 [ 159.499550][ T8783] ? kmsan_set_origin_checked+0x95/0xf0 [ 159.505137][ T8783] ? kmsan_get_metadata+0x11d/0x180 [ 159.510389][ T8783] ? kmsan_get_metadata+0x11d/0x180 [ 159.515654][ T8783] ip_queue_xmit+0xcc/0xf0 [ 159.520117][ T8783] ? tcp_v4_fill_cb+0x580/0x580 [ 159.525009][ T8783] __tcp_transmit_skb+0x4221/0x6090 [ 159.530291][ T8783] tcp_write_xmit+0x30e1/0xb470 [ 159.535226][ T8783] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 159.541408][ T8783] __tcp_push_pending_frames+0x124/0x4e0 [ 159.547105][ T8783] tcp_push+0x6fa/0x8a0 [ 159.551339][ T8783] tcp_sendmsg_locked+0x5d89/0x6d00 [ 159.556675][ T8783] tcp_sendmsg+0xb2/0x100 [ 159.561057][ T8783] ? tcp_sendmsg_locked+0x6d00/0x6d00 [ 159.566463][ T8783] ? tcp_sendmsg_locked+0x6d00/0x6d00 [ 159.571871][ T8783] inet_sendmsg+0x178/0x2e0 [ 159.576448][ T8783] ? inet_send_prepare+0x600/0x600 [ 159.581590][ T8783] ? inet_send_prepare+0x600/0x600 [ 159.586747][ T8783] sock_write_iter+0x606/0x6d0 [ 159.591571][ T8783] ? sock_read_iter+0x700/0x700 [ 159.596479][ T8783] __vfs_write+0xa5a/0xca0 [ 159.600970][ T8783] vfs_write+0x444/0x8e0 [ 159.605296][ T8783] ksys_write+0x267/0x450 [ 159.609677][ T8783] __se_sys_write+0x92/0xb0 [ 159.614256][ T8783] __x64_sys_write+0x4a/0x70 [ 159.618886][ T8783] do_syscall_64+0xb8/0x160 [ 159.623431][ T8783] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 159.629350][ T8783] RIP: 0033:0x7faec4a14970 [ 159.633792][ T8783] Code: 73 01 c3 48 8b 0d 28 d5 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 99 2d 2c 00 00 75 10 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 7e 9b 01 00 48 89 04 24 [ 159.654570][ T8783] RSP: 002b:00007ffcb608a808 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.663019][ T8783] RAX: ffffffffffffffda RBX: 0000000000000034 RCX: 00007faec4a14970 [ 159.671024][ T8783] RDX: 0000000000000034 RSI: 0000556540a3cdd8 RDI: 0000000000000003 [ 159.679024][ T8783] RBP: 0000556540a2e0f0 R08: 00007ffcb60bd080 R09: 0000000000000070 [ 159.687020][ T8783] R10: 000000000000009f R11: 0000000000000246 R12: 0000000000000001 [ 159.695018][ T8783] R13: 00007ffcb608a89f R14: 000055653fc0fbe7 R15: 0000000000000003 [ 159.703050][ T8783] [ 159.705388][ T8783] Uninit was stored to memory at: [ 159.710439][ T8783] kmsan_internal_chain_origin+0xad/0x130 [ 159.716199][ T8783] __msan_chain_origin+0x50/0x90 [ 159.721168][ T8783] ___bpf_prog_run+0x6c64/0x97a0 [ 159.726139][ T8783] __bpf_prog_run32+0x101/0x170 [ 159.731025][ T8783] packet_rcv_fanout+0x51e/0x25c0 [ 159.736088][ T8783] dev_queue_xmit_nit+0x862/0x1270 [ 159.741250][ T8783] dev_hard_start_xmit+0x20f/0xab0 [ 159.746682][ T8783] sch_direct_xmit+0x512/0x18b0 [ 159.751560][ T8783] __qdisc_run+0x15ec/0x3350 [ 159.756186][ T8783] __dev_queue_xmit+0x23b7/0x3b20 [ 159.761248][ T8783] dev_queue_xmit+0x4b/0x60 [ 159.765786][ T8783] ip_finish_output2+0x20fd/0x2610 [ 159.770929][ T8783] __ip_finish_output+0xaa7/0xd80 [ 159.776000][ T8783] ip_finish_output+0x166/0x410 [ 159.780908][ T8783] ip_output+0x593/0x680 [ 159.785180][ T8783] __ip_queue_xmit+0x1b5c/0x21a0 [ 159.790152][ T8783] ip_queue_xmit+0xcc/0xf0 [ 159.794628][ T8783] __tcp_transmit_skb+0x4221/0x6090 [ 159.799859][ T8783] tcp_write_xmit+0x30e1/0xb470 [ 159.804742][ T8783] __tcp_push_pending_frames+0x124/0x4e0 [ 159.810409][ T8783] tcp_push+0x6fa/0x8a0 [ 159.814625][ T8783] tcp_sendmsg_locked+0x5d89/0x6d00 [ 159.819857][ T8783] tcp_sendmsg+0xb2/0x100 [ 159.824241][ T8783] inet_sendmsg+0x178/0x2e0 [ 159.828779][ T8783] sock_write_iter+0x606/0x6d0 [ 159.833580][ T8783] __vfs_write+0xa5a/0xca0 [ 159.838033][ T8783] vfs_write+0x444/0x8e0 [ 159.842312][ T8783] ksys_write+0x267/0x450 [ 159.846677][ T8783] __se_sys_write+0x92/0xb0 [ 159.851212][ T8783] __x64_sys_write+0x4a/0x70 [ 159.855841][ T8783] do_syscall_64+0xb8/0x160 [ 159.860378][ T8783] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 159.866305][ T8783] [ 159.868659][ T8783] Local variable ----regs@__bpf_prog_run32 created at: [ 159.875537][ T8783] __bpf_prog_run32+0x87/0x170 [ 159.880331][ T8783] __bpf_prog_run32+0x87/0x170 [ 159.885110][ T8783] ===================================================== [ 159.892062][ T8783] Disabling lock debugging due to kernel taint [ 159.898238][ T8783] Kernel panic - not syncing: panic_on_warn set ... [ 159.904865][ T8783] CPU: 0 PID: 8783 Comm: sshd Tainted: G B 5.7.0-rc4-syzkaller #0 [ 159.913998][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.924088][ T8783] Call Trace: [ 159.927469][ T8783] dump_stack+0x1c9/0x220 [ 159.931864][ T8783] panic+0x3d5/0xc3e [ 159.935844][ T8783] kmsan_report+0x1df/0x1e0 [ 159.940408][ T8783] __msan_warning+0x58/0xa0 [ 159.944969][ T8783] packet_rcv_fanout+0x2442/0x25c0 [ 159.950144][ T8783] ? __skb_clone+0x939/0x970 [ 159.954779][ T8783] ? kmsan_get_metadata+0x11d/0x180 [ 159.960018][ T8783] ? kmsan_get_metadata+0x11d/0x180 [ 159.965279][ T8783] ? packet_direct_xmit+0x470/0x470 [ 159.970749][ T8783] dev_queue_xmit_nit+0x862/0x1270 [ 159.975940][ T8783] dev_hard_start_xmit+0x20f/0xab0 [ 159.981133][ T8783] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 159.987257][ T8783] ? kmsan_get_metadata+0x11d/0x180 [ 159.992501][ T8783] sch_direct_xmit+0x512/0x18b0 [ 159.997419][ T8783] __qdisc_run+0x15ec/0x3350 [ 160.002061][ T8783] ? kmsan_get_metadata+0x11d/0x180 [ 160.007306][ T8783] ? kmsan_set_origin_checked+0x95/0xf0 [ 160.013136][ T8783] __dev_queue_xmit+0x23b7/0x3b20 [ 160.018285][ T8783] dev_queue_xmit+0x4b/0x60 [ 160.022946][ T8783] ip_finish_output2+0x20fd/0x2610 [ 160.028103][ T8783] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 160.034222][ T8783] ? nf_ct_deliver_cached_events+0x511/0x6c0 [ 160.040304][ T8783] __ip_finish_output+0xaa7/0xd80 [ 160.045397][ T8783] ip_finish_output+0x166/0x410 [ 160.050305][ T8783] ip_output+0x593/0x680 [ 160.054627][ T8783] ? ip_mc_finish_output+0x6c0/0x6c0 [ 160.059951][ T8783] ? ip_finish_output+0x410/0x410 [ 160.065020][ T8783] __ip_queue_xmit+0x1b5c/0x21a0 [ 160.070264][ T8783] ? kmsan_set_origin_checked+0x95/0xf0 [ 160.075859][ T8783] ? kmsan_get_metadata+0x11d/0x180 [ 160.081134][ T8783] ? kmsan_get_metadata+0x11d/0x180 [ 160.086404][ T8783] ip_queue_xmit+0xcc/0xf0 [ 160.090895][ T8783] ? tcp_v4_fill_cb+0x580/0x580 [ 160.095857][ T8783] __tcp_transmit_skb+0x4221/0x6090 [ 160.101182][ T8783] tcp_write_xmit+0x30e1/0xb470 [ 160.106139][ T8783] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 160.112336][ T8783] __tcp_push_pending_frames+0x124/0x4e0 [ 160.118053][ T8783] tcp_push+0x6fa/0x8a0 [ 160.122273][ T8783] tcp_sendmsg_locked+0x5d89/0x6d00 [ 160.127613][ T8783] tcp_sendmsg+0xb2/0x100 [ 160.131994][ T8783] ? tcp_sendmsg_locked+0x6d00/0x6d00 [ 160.137466][ T8783] ? tcp_sendmsg_locked+0x6d00/0x6d00 [ 160.142891][ T8783] inet_sendmsg+0x178/0x2e0 [ 160.147448][ T8783] ? inet_send_prepare+0x600/0x600 [ 160.152600][ T8783] ? inet_send_prepare+0x600/0x600 [ 160.157757][ T8783] sock_write_iter+0x606/0x6d0 [ 160.162580][ T8783] ? sock_read_iter+0x700/0x700 [ 160.167469][ T8783] __vfs_write+0xa5a/0xca0 [ 160.171959][ T8783] vfs_write+0x444/0x8e0 [ 160.176267][ T8783] ksys_write+0x267/0x450 [ 160.180657][ T8783] __se_sys_write+0x92/0xb0 [ 160.185406][ T8783] __x64_sys_write+0x4a/0x70 [ 160.190045][ T8783] do_syscall_64+0xb8/0x160 [ 160.194725][ T8783] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 160.200647][ T8783] RIP: 0033:0x7faec4a14970 [ 160.205089][ T8783] Code: 73 01 c3 48 8b 0d 28 d5 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 99 2d 2c 00 00 75 10 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 7e 9b 01 00 48 89 04 24 [ 160.224747][ T8783] RSP: 002b:00007ffcb608a808 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.233197][ T8783] RAX: ffffffffffffffda RBX: 0000000000000034 RCX: 00007faec4a14970 [ 160.241265][ T8783] RDX: 0000000000000034 RSI: 0000556540a3cdd8 RDI: 0000000000000003 [ 160.249371][ T8783] RBP: 0000556540a2e0f0 R08: 00007ffcb60bd080 R09: 0000000000000070 [ 160.257375][ T8783] R10: 000000000000009f R11: 0000000000000246 R12: 0000000000000001 [ 160.265373][ T8783] R13: 00007ffcb608a89f R14: 000055653fc0fbe7 R15: 0000000000000003 [ 160.274517][ T8783] Kernel Offset: 0xcc00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 160.286208][ T8783] Rebooting in 86400 seconds..